Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: ErEFLVtNtPoucGrHM6Yw0nss5ZJiZqxN98+IU+1RN3o=
Subject key identifier: 73:7F:F6:DF:05:E9:30:5E:0E:28:84:45:06:2E:ED:56:69:12:A1:52
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 01968A00E2C3159FE4D705BA6EAD5C9D064A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 04:00:35 +0000
Manifest this update: Thu 01 May 2025 04:00:35 +0000
Manifest next update: Fri 02 May 2025 04:00:35 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: g3r9ZMDljTn5RrrnnAuO/KsMQft5lyn6CzNgaKc7gHw=)
2: iq3ssvUo5bXZcIWEHzsdc8Eqg0c.roa (hash: Ra9VLNdMH1vgwJCIHGEFTa1hXj9TZ6bEeh1Cxv0m8Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:00:e2:c3:15:9f:e4:d7:05:ba:6e:ad:5c:9d:06:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: May 1 04:00:35 2025 GMT
Not After : May 2 04:00:35 2025 GMT
Subject: CN=737ff6df05e9305e0e288445062eed566912a152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:b1:1f:2a:00:6b:c0:ca:da:fd:36:86:e0:
28:0a:56:11:18:ca:b5:ff:23:53:d9:6d:81:f4:27:
a0:e7:29:4b:22:7d:ab:6e:92:3c:d9:7d:81:69:83:
31:45:f2:59:ca:03:bc:95:99:97:ea:65:e6:b6:2a:
f1:a5:96:48:09:b1:da:f8:e4:f3:39:ec:c0:d8:ab:
aa:a1:54:11:53:8b:5f:93:df:e1:c6:3e:a1:2a:9a:
ef:05:05:3c:b4:3e:c6:5b:a3:28:d8:f6:c6:bc:22:
12:b1:24:72:f1:bb:76:6a:bd:39:51:14:a4:fb:0f:
be:cc:11:52:12:21:3b:6e:d4:bf:d4:ea:41:06:8d:
83:ca:f8:44:99:2e:e2:3c:e5:70:97:50:b6:00:9f:
99:0c:d8:04:0d:ad:ea:ff:dd:64:9f:e4:e3:31:50:
5c:f9:42:09:78:c1:41:52:4e:41:78:71:d9:18:df:
56:83:df:2a:7e:b6:35:7e:97:b4:71:d3:c5:bb:b4:
3d:03:af:76:ef:1b:86:80:bb:9c:75:03:40:e2:50:
42:83:0f:e3:1d:b0:47:ae:7c:5a:5d:ed:92:a8:4b:
47:d6:6b:9b:eb:1a:f0:5d:21:8b:5d:a4:5f:4e:f2:
39:2b:2e:9a:fa:91:af:72:ff:02:42:3c:70:07:8b:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7F:F6:DF:05:E9:30:5E:0E:28:84:45:06:2E:ED:56:69:12:A1:52
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2f:3c:3e:00:95:b1:cf:6e:62:25:a8:81:08:a3:93:62:7d:
b9:13:62:73:14:4e:9f:80:21:81:61:2c:ac:9c:56:6b:06:8c:
9c:11:3f:07:56:47:d5:da:6f:e7:40:3a:d6:9b:67:b7:41:f5:
4b:e3:10:e0:e7:0e:78:fa:37:1a:fc:88:c3:15:0c:fd:fa:e2:
85:ab:9b:1a:6d:c6:94:c2:55:4b:9a:ec:ea:c7:73:f6:39:28:
70:bb:4f:0c:ea:08:33:86:97:3b:5f:75:09:97:29:10:09:cb:
51:e5:27:80:bd:58:11:eb:db:d9:63:9e:67:bb:39:70:56:2e:
1b:a4:e7:31:97:b9:ac:88:91:aa:87:61:20:79:41:cf:86:96:
5e:96:b8:41:e2:1b:3c:47:7e:db:03:0a:9a:a3:15:c1:98:94:
8d:d2:89:95:ba:09:4f:aa:77:10:f9:52:09:bc:79:ab:5c:0b:
8a:71:b9:29:06:94:42:cc:6d:ab:d9:4c:21:f4:af:f8:d9:c6:
f5:7f:f6:0e:66:ea:b3:7b:9e:d7:a8:e2:e2:01:5c:9a:3d:e0:
57:5c:37:50:0e:19:52:7d:85:7b:82:f9:2d:92:74:cd:93:e9:
ca:94:d7:4e:bb:b7:95:63:fb:ce:41:20:63:c1:ff:21:46:5b:
06:88:f9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:01:37 2025 by rpki-client